Overview

This article explains how to allowlist Softdrive components in Microsoft Defender Antivirus and Microsoft Defender for Endpoint.

Microsoft Defender may occasionally identify, scan, quarantine, or interfere with trusted Softdrive components. Administrators can configure folder exclusions for Microsoft Defender Antivirus or use certificate-based indicators in Microsoft Defender for Endpoint.

Applies To

• Softdrive Client for Windows
• Softdrive Cloud Desktops
• Microsoft Defender Antivirus
• Microsoft Defender for Endpoint Plan 1 or Plan 2

Prerequisites

• Local administrator access to the applicable Windows device
• Access to the Microsoft Defender portal when using certificate-based allowlisting
• Permission to configure Microsoft Defender exclusions or indicators
• The complete installation path for the Softdrive components being allowlisted

Procedure

Option 1: Configure Microsoft Defender Antivirus Folder Exclusions

Use this option when Microsoft Defender Antivirus scanning is causing a confirmed detection, performance, or application compatibility issue.

1. Add the Exclusions Using Windows Security

• Sign in to the affected computer with an administrator account.
• Open Windows Security.
• Select Virus & threat protection.
• Under Virus & threat protection settings, select Manage settings.
• Scroll down to Exclusions.
• Select Add or remove exclusions.
• Select Add an exclusion, and then select Folder.
• Add the applicable directories listed below.

Softdrive Client — Local Computer

Replace <username> with the Windows profile name of the affected user.

C:\Users\<username>\AppData\Local\Programs\softdrive-launcher
C:\Users\<username>\AppData\Roaming\softdrive-launcher

Softdrive Server — Cloud Desktop

C:\Softdrive

QEMU Guest Agent — Cloud Desktop

C:\Program Files\Qemu-ga

2. Add the Exclusions Using PowerShell

As an alternative to Windows Security, administrators can configure the exclusions using PowerShell.

1. Open Windows PowerShell as an administrator.
2. Run the commands applicable to the affected device.

Softdrive Client — Local Computer

Replace <username> with the Windows profile name of the affected user.

Add-MpPreference -ExclusionPath "C:\Users\<username>\AppData\Local\Programs\softdrive-launcher"
Add-MpPreference -ExclusionPath "C:\Users\<username>\AppData\Roaming\softdrive-launcher"

Softdrive Server and QEMU Guest Agent — Cloud Desktop

Add-MpPreference -ExclusionPath "C:\Softdrive"
Add-MpPreference -ExclusionPath "C:\Program Files\Qemu-ga"

3. Verify the Microsoft Defender Antivirus Exclusions

Run the following command in PowerShell:

$DefenderPreferences = Get-MpPreference
$DefenderPreferences.ExclusionPath

Confirm that the applicable Softdrive directories appear in the output.

You can also review the exclusions from:

• Open Windows Security.
• Select Virus & threat protection.
• Select Manage settings.
• Under Exclusions, select Add or remove exclusions.

Troubleshooting

• Confirm that the configured path exactly matches the Softdrive installation directory.
• Replace <username> with the correct Windows user profile name.
• Verify the exclusion by running Get-MpPreference in an elevated PowerShell window.
• Confirm that an organizational policy is not replacing or preventing locally configured exclusions.
• Allow time for Microsoft Defender for Endpoint policy changes to reach the affected device.
• Review Microsoft Defender protection history, alerts, and device timeline for detections involving Softdrive.
• Confirm whether Softdrive is being blocked by Microsoft Defender Antivirus, Attack Surface Reduction, Controlled Folder Access, SmartScreen, or Windows App Control.

If the issue persists, contact support@softdrive.co and provide:

• The name of the Microsoft Defender feature generating the detection
• The affected computer name
• The complete file path and process name involved
• A screenshot or export of the Defender detection
• The date and approximate time when the issue occurred
• Relevant Microsoft Defender alerts or protection-history details